Privacy

OxSlate · last updated 8 August 2026

OxSlate lets one person (the supporter) keep a queue of household admin and send a single calm reminder at a time to another person (the recipient). Because one person is entering information about another, we are deliberately narrow about what we collect and what either side can see.

What we do not collect

Stated first, because these absences are the point of the product rather than gaps we intend to fill:

No read receipts. We do not record whether a reminder was opened, seen, or how long it went unread. It is not stored, so it can never be shown to the supporter.
No audio. Speech is transcribed by your own phone. Recordings never leave the device and we never receive them.
No location, no contacts, no advertising identifier, no analytics or tracking SDKs.
No accounts. No email address, no password, no social sign-in.
We do not sell personal data, and we do not use your content to train AI models.

What we do collect

Data	Why	Where it goes
A generated device identifier and access token	To pair two phones and authorise requests without accounts. Tokens are stored hashed.	Our API (AWS, US East)
Reminder content: subject, due date, category, repeat, any note or link you add	To deliver the reminder to the recipient's phone at the right time	Our API, and the recipient's device
The supporter's display name	Shown on reminders so the recipient knows who asked	Our API, and the recipient's device
Time zone	So reminders arrive at a sensible local hour and respect quiet hours	Our API
The recipient's delivery choices: paused, disconnected, and what happens if a date passes	To enforce their control over delivery	Our API. The escalation choice is never revealed to the supporter.
Text you dictate or type into "Say it once"	To turn a spoken list into separate dated reminders	Our API, then Amazon Bedrock for processing
Purchase and subscription status	To unlock paid features and restore purchases	RevenueCat and Google Play

Photos you attach stay on the supporter's device. We store a reference to the image, not the image itself, so the picture is never uploaded to our servers.

What each person can see

The supporter can see only that a reminder was delivered, marked done, snoozed, stopped, or that a date passed. Nothing else about the recipient's behaviour is recorded or shown.

The recipient can pause deliveries, stop any single reminder, or disconnect entirely, at any time, without giving a reason. Disconnecting cannot be undone by the supporter — it requires a fresh invitation that the recipient chooses to accept.

Who processes data for us

Amazon Web Services — hosting, storage and scheduled delivery (US East region).
Amazon Bedrock — processes dictated or typed text to extract reminders and suggest gentler phrasing. Content is not used to train models.
RevenueCat and Google Play Billing — subscriptions and purchase restoration.
Google Play Services — scanning an invitation QR code. Scanning happens inside Play Services, which is why this app needs no camera permission.

Permissions, and why

Notifications — the recipient's entire experience is a notification. Requested during pairing, with an explanation.
Microphone — only while the supporter holds the "Say it once" button. Transcribed on device; no audio is uploaded.
Internet — to carry reminders between the two phones.
Run at startup — scheduled reminders do not survive a reboot without it, and a missed reminder is the failure this app exists to prevent.

Retention and deletion

Reminders are kept while the connection exists. Invitations expire after seven days automatically. Disconnecting deletes the queue from the recipient's device and stops all delivery. Uninstalling ends collection; backups are disabled, so nothing is copied to a cloud account or transferred to a new phone.

To have server-side data for a connection deleted, contact us at the address below and we will remove it.

Children

OxSlate is not directed at children and we do not knowingly collect data from children under 13.

Not medical advice

OxSlate is a household organisation and reminder tool. It does not diagnose, treat or provide medical advice, and it is not a medical device.

Contact

Questions, or a deletion request: privacy@dofolabs.space